setup-agentic-scaffolding

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill registers MCP servers that the agent runtime will fetch-and-run from external registries at startup — specifically the pinned JBang GAV "io.quarkus:quarkus-agent-mcp:1.2.5:runner" and the npm package "@upstash/context7-mcp@4.0.3", which are resolved and executed at runtime.